v0.3.0

Changelog

• 8e17df7: feat(mcp): add upload/download tools via sftp (Claude Opus 4.8 (1M context) noreply@anthropic.com)
• f52398b: feat(mcp): timeout_seconds, partial-output-on-timeout, output cap, parallel exec_multi, detach (Claude Opus 4.8 (1M context) noreply@anthropic.com)
• b47248d: feat(security): verify host keys via TOFU by default (Claude Opus 4.8 (1M context) noreply@anthropic.com)
• d73a0c7: fix(concurrency): serialize config RMW and audit appends ( <>)
• b9ad1d7: fix(mcp): infer auth=key when add_server is given key_path (@michael-ltm)
• b7d3c34: fix(mcp): thread request ctx, deterministic list, version var, gen_key auth, ProbeMany cancel ( <>)
• 4507d52: fix(plugin): make the repo a valid Claude Code marketplace ( <>)
• 7f47a90: fix(plugin): plugin.json author must be an object (Claude Opus 4.7 (1M context) noreply@anthropic.com)
• a323e5e: fix(safety): block flagless shred /dev/*, stop IPv6 regex masking MACs ( <>)
• 00f94cf: fix(safety): broaden secret masking and dangerous-command filter (Claude Opus 4.8 (1M context) noreply@anthropic.com)
• 2488b48: style: gofmt test files ( <>)